Directed Retry

A fundamental and vital goal of any mobile communication network is to maintain communications between the network and the mobile station (MS), whether the MS is dwelling in an area or on the move. To assist the aims and objectives GSM is commonly known to use 'Handover' for which there is a specific GSM standard TS03.09 [cf W-CDMA see 3GPP TS23.009].

The assumption being made for these cause values is that the MS is seeking to obtain a service for speech calls

│7 6 5│ 4 3 2 1│ │
│
│0 0 0│0 0 0 0│ │Radio interface message failure │
│
│0 0 0│0 0 0 1│ │Radio interface failure │
│
│0 0 0│0 0 1 0│ │Uplink quality │
│
│0 0 0│0 0 1 1│ │Uplink strength │
│
│0 0 0│0 1 0 0│ │Downlink quality │
│
│0 0 0│0 1 0 1│ │Downlink strength │
│
│0 0 0│0 1 1 0│ │Distance │
│
│0 0 0│0 1 1 1│ │O and M intervention │
│
│0 0 0│1 0 0 0│ │Response to MSC invocation │
│
│0 0 0│1 0 0 1│ │Call control │
│
│0 0 0│1 0 1 0│ │Radio interface failure, reversion to old channel │
│
│0 0 0│1 0 1 1│ ││
│
│0 0 0│1 1 0 0│ │Better Cell │
│
│0 0 0│1 1 0 1│ │Directed Retry │
│
│0 0 0│1 1 1 0│ ││
│
│0 0 0│1 1 1 1│ │Traffic

Key and germane to handover being successful is that operators can use various handover techniques controlled by handover triggering algorithms. These triggers activiate when detection mechanisms identify propagation or network conditions at the existing cell or for the target cell where neither meet a set criteria for usage. One such condition is referred to by Professor Sami Tabbane in Management of Radio Mobility: The Handover Procedure - 8.1.4.2 Intercell and Intra-BSC Handover "A handover that is triggered for reasons of traffic loading and occurs during call setup is called directed retry." 

Examiners are expected to know about Directed Retry, to take account of its possibility when conducting CSA (cell site analysis) investigations and understand its influence and impact on evidence record in call records and associated cell data. A point of contention in evidence for often arises where a defendant states "I was not at the location claimed by the prosecution but was in a different area". Invariably this receives a response "Why does your mobile use the radio coverage from a particular sector (azimuth) from a particular fixed mast (BTS)?" Directed retry makes possible the scenario of having a mobile phone in an adjacent cell from the one shown in the call records. Directed Retry is not a trigger simply triggering every few minutes but arises as Professor Tabbane records, due to traffic loading at the time of call setup.

A mistake that experts and investigators could make would be to ignore the existence of Directed Retry and, even more problematical, not to have asked the question was Directed Retry active at cell/BSC level at the material time of the calls, apart from any intervention within the network.

GSM standards make Directed Retry explicit that which might be implicit to for a GSM radio location area. This logically raises questions how can Directed Retry be configured and activated? Mobile network radio equipment manufacturers offer the capability in their equipment for mobile network engineers to radio fine tune post-installation, and the parameters that can be fine tuned are the Handover triggers of which Directed Retry is one such trigger:

As each equipment manufacturer vary the way fine tuning may be implemented using a GUI to input the trigger parameters is one methiod. Another is to incorporate data into the .mdb or .xls file which has been scripted to produce e.g. an .xml output for uplifting to the radio base station database. This means Directed Retry can be checked that it is active in a particular GSM radio location area. Furthermore, due to continuing radio fine tuning updates to the trigger parameters can occur and older versions of .mdb/.xls maybe recovered from archive.

Experts and Investigators will need to be aware of the triggers Directed Retry (DR) and Forced Directed Retry (FDR) and identify when, in a mobile network, either of these triggers would be implemented and activated for the radio network. This equally means tracking down the equipment manufacturers that offer one form or another or both forms of Directed Retry.

GPRS Cell Site Analysis

GPRS CSA

http://cellsiteanalysis.blogspot.co.uk/2013/11/gprs-csa.html

GPRS CSA

There are often forum discussions about GPRS (general packet radio switching) and how to conduct CSA (cell site analysis). Given that GPRS is expected to form a basic data service across GSM/WCDMA/LTE it is always worth starting at the beginning with GSM/GPRS as GPRS has numerous influences on GSM that have evolved for today's mobile networks.

As the old adage goes "time and tide wait for no man" it is important to get to grips with GPRS at its easiest stages and when understood move on to track down changes and comprehend them found in the additional layers involved with later transmission technologies.

When I was teaching/training at the Institute the Professor in-charge of educational studies, at that time, wanted me to show where mobile communication research material originated, authenticate sources and compiled the material before student/delegate training could go ahead. Invariably this meant starting out producing hand-drawn sketches that would be converted and re-produced for slide/powerpoint presentations. The information in the sketehes being sourced from standards, books, articles, whitepapers, manufacturer specs etc, and experience (testing), of course. From my GPRS CSA course researched material prepared back in 2002/2003 I have pulled out the folder one hand-drawn sketch (below) from the collection of sketches prepared for GPRS CSA.

The sketch layout is heavily influenced by the existing standards and industry illustrations available at that time. I have added a few personal touches in order to produce this at-a-glance sketch. Perhaps students, investigators and examiners may find it a useful starting point. I shall add more here, at this blog, about GPRS CSA but I do have quite a few other research projects on the go and I want to write about those too.

Just briefly though, GPRS CSA is not possible simply by referring 'only' to CDRs.

Firstly, There are two CDRs to consider. GPRS usage is not soley defined by a Call Detail Record. GPRS has its own record called the Charging Data Record (also referred to by the acronym CDR) defined to confirm data usage, irrespective of the content transmitted in the data, and services used etc.

Secondly, GPRS CSA should not be undertaken lightly and should not be progressed where the investigator/examiner is being given partial information or being denied access to information.

Thirdly, to avoid mishaps associated with the second point mentioned above, examiners/investigators should establish at first instance the MS, (U)SIM/handset, used at the material time. Confirrmation which cells were GPRS enabled and were available for the relevant location/s at the material time; the requirement is also relevant identifing those cells that were not enabled for GPRS for the relevant location/s.

Fourthly, make sure it is clear which GPRS usage is in the home network and which is GPRS usage caused to be transported across donor roaming partner networks but within the same country (cf. Vodafone and Hutchinson 3G (H3G)).

(U)SIM Examination (Physical) Pt2

(U)SIM Examination (Physical) Pt2

Before we can progress to consider various methods of (U)SIM physical examination there are more standards we need to be aware and there are reasons for that. Transitioning from GSM to 3GPP (*wcdma) standards required rewriting existing GSM standards to make the standards technology neutral to integrate GSM into future mobile developments under 3GPP global standards. Technology-wise, we know that GSM is a defined circuit-switched voice mobile communications system that has evolved with value-added data services (GPRS, HSCSD and EDGE). 3GPP (wcdma) as we know is a defined packet-switched technology and thus would be a pointless exercise to re-invent the wheel, so to speak, and introduce a new voice circuit-switched system and the matured installation base that went with it. That needs to be understood on many levels when dealing with mobile communications. Three examples of GSM and 3GPP working together:

(i) generally, we refer to Release 99 (R99) as a reference point whereby 3GPP could transition and re-write mobile communication technology standards with birthing-periods: GSM only before 3GPP Release 4 (Rel-4); GSM only (Rel-4 and later); 3GPP and beyond / GSM (R99 and later).  This enabled manufacturers, developers and operators and service providers to conintue with GSM standards in a pure GSM environment or evolve to a 3GPP environment but in the knowledge access and inter-connectivity to GSM would continue:

(ii) introduction of 3GPP (*wcdma) would take time and thus should avoid, as best possible, disruption to existing moble services;

(iii) GSM user/subscriber base was still growing at that time and has now reached over 3-billion users, from which we can draw a conclusion that GSM's importance in its relationship with 3GPP should not be under-estimated.GSM is by no means the junior partner.

In the mobile examination environment, we, as examiners, are exposed to multitude and multiple-layers of technical and technology standards many of which impact on (U)SIM, and particuarly so if the technical and technology generates a mobile communication outcome associated to/with a user/subscriber. 

(*) wcdma is one of a family of mobile technology standards under 3GPP and has been used for easy of reference. 

The scope of the tests and the requirements set down in GSM1117 were reproduced under the approved and adopted standard 3GPP TS51.017. In Pt1( usim-examination-physical-pt1.html ) reference was made to GSM11.11, however the approved and adopted standard (and the counterpart to GSM11.11) is 3GPP TS51.011:

PHY:    Physical characteristics - 3GPP TS 51.011 [1], clause 4.
ELEC:    Electronic signals and transmission protocols - 3GPP TS 51.011 [1], clause 5.
AFS:    Application and File structure - 3GPP TS 51.011 [1], clause 6.
SEC:    Security features - 3GPP TS 51.011 [1], clause 7.
CMD:    Description of the commands - 3GPP TS 51.011 [1], clause 9.
CEF:    Contents of the elementary files - 3GPP TS 51.011 [1], clause 10.
APP:    Application Protocol - 3GPP TS 51.011 [1], clause 11.

Whilst GSM11.17 standard is the starting point for ICC/SIM and 3GPP TS51.011 moved the technology to neutral ground to enable 3GPP to evolve 3G environment standards incorportating interconnectivity to and backward compatibility for ICC/UICC, the 3GPP evolution hasn't stopped there. There is, of course, 3GPP TS 31.120 the aim of which is to ensure interoperability between an UICC and a Terminal independently of the respective manufacturer, card issuer or operator. This is the expansion of the 3GPP domain going beyond specific limitations encumbent with a particular proprietory technology.

The run of standards doesn't end there. Attention and consideration should be given to:

ETSI standards
TS 102 230
TS 102 221

International standards
ISO/IEC 7816-pt1 to pt4

The standards referred to above are merely a starting point to identify the complexities involved in dealing with (U)SIM card and tasks involved in considering examination techniques that may not simply relate to recovery of data but other aspects and attributes of a card which may point to evidence. Readers should be prepared to delve into the standards above and release the huge number that haven't been mentioned. There are various analogies that may be used to imagine what I have in mind for this physical series, but I quite like the analogy about forensic vehicle tyre analysis. Evidentially, consideration is given to tyre size, tread, pressure, rubber, moulding, any wheel balacing and so on to assess a skid mark or tracks at the scene of a crime. It is equally possible to use an investigative and examination approach to SIM/USIM card materials, contacts, gold content, embossing etc to identify potential evidence.

(U)SIM Examination (Physical) Pt2

(U)SIM Examination (Physical) Pt2

Before we can progress to consider various methods of (U)SIM physical examination there are more standards we need to be aware and there are reasons for that. Transitioning from GSM to 3GPP (*wcdma) standards required rewriting existing GSM standards to make the standards technology neutral to integrate GSM into future mobile developments under 3GPP global standards. Technology-wise, we know that GSM is a defined circuit-switched voice mobile communications system that has evolved with value-added data services (GPRS, HSCSD and EDGE). 3GPP (wcdma) as we know is a defined packet-switched technology and thus would be a pointless exercise to re-invent the wheel, so to speak, and introduce a new voice circuit-switched system and the matured installation base that went with it. That needs to be understood on many levels when dealing with mobile communications. Three examples of GSM and 3GPP working together:

(i) generally, we refer to Release 99 (R99) as a reference point whereby 3GPP could transition and re-write mobile communication technology standards with birthing-periods: GSM only before 3GPP Release 4 (Rel-4); GSM only (Rel-4 and later); 3GPP and beyond / GSM (R99 and later).  This enabled manufacturers, developers and operators and service providers to conintue with GSM standards in a pure GSM environment or evolve to a 3GPP environment but in the knowledge access and inter-connectivity to GSM would continue:

(ii) introduction of 3GPP (*wcdma) would take time and thus should avoid, as best possible, disruption to existing moble services;

(iii) GSM user/subscriber base was still growing at that time and has now reached over 3-billion users, from which we can draw a conclusion that GSM's importance in its relationship with 3GPP should not be under-estimated.GSM is by no means the junior partner.

In the mobile examination environment, we, as examiners, are exposed to multitude and multiple-layers of technical and technology standards many of which impact on (U)SIM, and particuarly so if the technical and technology generates a mobile communication outcome associated to/with a user/subscriber. 

(*) wcdma is one of a family of mobile technology standards under 3GPP and has been used for easy of reference. 

The scope of the tests and the requirements set down in GSM1117 were reproduced under the approved and adopted standard 3GPP TS51.017. In Pt1( usim-examination-physical-pt1.html ) reference was made to GSM11.11, however the approved and adopted standard (and the counterpart to GSM11.11) is 3GPP TS51.011:

PHY:    Physical characteristics - 3GPP TS 51.011 [1], clause 4.
ELEC:    Electronic signals and transmission protocols - 3GPP TS 51.011 [1], clause 5.
AFS:    Application and File structure - 3GPP TS 51.011 [1], clause 6.
SEC:    Security features - 3GPP TS 51.011 [1], clause 7.
CMD:    Description of the commands - 3GPP TS 51.011 [1], clause 9.
CEF:    Contents of the elementary files - 3GPP TS 51.011 [1], clause 10.
APP:    Application Protocol - 3GPP TS 51.011 [1], clause 11.

Whilst GSM11.17 standard is the starting point for ICC/SIM and 3GPP TS51.011 moved the technology to neutral ground to enable 3GPP to evolve 3G environment standards incorportating interconnectivity to and backward compatibility for ICC/UICC, the 3GPP evolution hasn't stopped there. There is, of course, 3GPP TS 31.120 the aim of which is to ensure interoperability between an UICC and a Terminal independently of the respective manufacturer, card issuer or operator. This is the expansion of the 3GPP domain going beyond specific limitations encumbent with a particular proprietory technology.

The run of standards doesn't end there. Attention and consideration should be given to:

ETSI standards
TS 102 230
TS 102 221

International standards
ISO/IEC 7816-pt1 to pt4

The standards referred to above are merely a starting point to identify the complexities involved in dealing with (U)SIM card and tasks involved in considering examination techniques that may not simply relate to recovery of data but other aspects and attributes of a card which may point to evidence. Readers should be prepared to delve into the standards above and release the huge number that haven't been mentioned. There are various analogies that may be used to imagine what I have in mind for this physical series, but I quite like the analogy about forensic vehicle tyre analysis. Evidentially, consideration is given to tyre size, tread, pressure, rubber, moulding, any wheel balacing and so on to assess a skid mark or tracks at the scene of a crime. It is equally possible to use an investigative and examination approach to SIM/USIM card materials, contacts, gold content, embossing etc to identify potential evidence.

LTE, Test Trials and Cell Site Analysis

LTE, Test Trials and Cell Site Analysis

There are some strange views floating around that cell site analysis is highly difficult or impossible now we have moved from GSM and 3G on to LTE, with it being so new that there is uncertainty.  I can imagine that LTE may cause speculation because LTE hasn't been sufficiently rolled out in the UK and it may appear there is no mature facts or figures upon which to rely. But, infact, there are facts and figures that have been generated in refining the LTE system for roll out and, of course, that knowledge benefits cell site analysis.

Back in 2009 mobile operator Telefonica O2 started conducting LTE test trials in Slough Berkshire UK. Throughput data quantification, radio test measurements, surveys, etc created a plethora of statistical information which O2 used in planning its LTE network.  

Those tests included a variety of known components required for analysis, which can be seen in the 'Key' legend.

Consideration of LTE requires tests to be conducted not only with a static analysis and assessment approach but also distance and velocity analysis and assessment approach, too. That is apart from the environmental considerations. For CSA that means drive tests alone are not good enough; nor using passive radio test measurement devices could fulfil the requirements of an analysis and assessment approach to comprehend an LTE service at a particular location. TrewMTE blog readers may recall I gave a helpful tip about looking at data and location here: Data Usage in Cell Site Analysis - http://trewmte.blogspot.co.uk/2012/08/data-usage-in-cell-site-analysis.html.

Of course, consideration of the particapting RF transceiver elements present the same requirement for cell site analysis to understand the arrangements at the base station for LTE as it did for GSM/3G.

TrewMTE blog readers may also recall that I set out a series of discussions about Cell Site Identification presented as primers:

Mini Course in Cell Site Identification (Pt1)
http://trewmte.blogspot.com/2011/12/mini-course-in-cell-site-identification.html

Mini Course in Cell Site Identification (Pt2)
http://trewmte.blogspot.com/2011/12/mini-course-in-cell-site-identification_31.html

Mini Course in Cell Site Identification (Pt3.s1)
http://trewmte.blogspot.co.uk/2012/01/mini-course-in-cell-site-identification.html

I have completed the last primers in the series above and was going to publish them, having given readers sufficient time to go away and research/study the earlier parts. However, this matter needed airing first, due to misconceptions that are floating about out there. I shall publish the other primers later on.

Do remember, I have used the term 'cell site' to capture readers' imaginations to immediately link readers' thoughts towards cell site analysis (CSA). However, cell site can be used to mean e.g. a GSM cell site, a 3G NodeB or a LTE eNode. 

To leave the user device out of any analysis would be to precide over an incomplete investigation. Readers will note in Cell Site Identification Part 1 an illustration was given linking devices and components that are required for consideration when investigating/researching during CSA. The MS (handset/SIM) forms part of the investigation. O2 LTE test trials equally identified two devices used for their tests.

The experienced investigator will immediately see that the devices in the image above, used during test trials, do not of themselves fit immediately with the common scenarios of mobile phone usage and cell site analysis. However, as is known it is only fairly recently that LTE enabled smartphones have been launched. An LTE investigative approach to considering a particular device used in a particular case requires identification of handsets, dongles and server devices. Moreover, identification of devices that switch between transmission technologies is also a must.

Orange and Vodka - mixing mobile networks (shaken, not stirred) -
http://trewmte.blogspot.co.uk/2010/05/orange-and-vodka-mixing-mobile-networks.html

Examination Techniques3: Blackberry Bold -
http://trewmte.blogspot.co.uk/2012/03/examination-techniques3-blackberry-bold.html

Diplomas: Mobile Telephone Evidence (MTEdipl) -
http://trewmte.blogspot.co.uk/2010/05/diplomas-mobile-telephone-evidence.html

Examination Techniques4: iPhone PDP Context

Examination Techniques4: iPhone PDP Context

In examination techniques3 it explored the potential for an examiner to investigate values and causes for PDP Reject Causes that may be revealed by entering Blackberry specific code on the handset keys and the tables containing information to undersatnd the meaning of causes:

Examination Techniques3: Blackberry Bold
http://trewmte.blogspot.com/2012/03/examination-techniques3-blackberry-bold.html

A question asked quite a few times since my posting about PDP is that can the same investigation be performed on other handsets. The answer is yes, and another example is iPhone code:

*3001#12345#*

The code works with iPhone releases: 2g, 3g, 3gs, 4g, 4gs

Installing Multi Band Mini Base Stations (MBMBS)

Installing Multi Band Mini Base Stations (MBMBS)

There is a large selection of material about Femtocells and their usefulness as a participant providing indoor coverage and how using Femtocells could be useful to cell site analysis etc. The thing is they are still some way off proving as the only solution for indoor coverage. There are other systems capable of providing indoor coverage described as multi band mini base stations (MBMBS) that are being used and, from a cost perspective, can be a highly viable alternative to operator-led Femtocells.

MBMBS do not require a fixed landline or landline operator account or e.g. an 18 months rental contract etc. The starting point is an existing SIM/USIM monthly payment subscriber account or a SIM/USIM prepaid subscriber account is required. This is needed for access to voice, data and cellular broadband.  

The base station units I have been installing over the last 14 months and running tests have shown MBMBS to be versatile and can be trial tested in various locations around a premise to determine the prime location for  usage of best serving coverage. Poor indoor coverage is still a major issue in urban, semi rural and rural areas that do not benefit for mature installations of masts as found in dense urban areas. Moreover, in dense urban areas coverage can be still be poor for indoor mobile communications where determination of the propability density function (pdf) for indoor coverage is rather difficult to perform and determine due to lack of ingress/egress to properties etc.  MBMBS can overcomes indoor coverage issues and, additionally, provide service backup or overflow for communications or for install in short/long term locations where fixed landline access is not readily available.

The natural extension for installing and using MBMBS is in domestic residences and, thus, they naturally compete quite effectively with Femtocells. Key and germane is that MBMBS are small and compact and their size impacts on the home no more than the size of current Home Hub dimensions and can be smaller than a Home Hub.

Because of the portability of MBMBS, not just in terms of network coverage, but decommissioning/recomminssioning it enables users to move to new premises and be instantly online.

The image of the backplane above is one example of connectivity enabling various communications equipment to be connected to it. A portable antenna can be mounted or, in the alternative, an external antenna affixed to the outside of a building or a mast pole can be used with the antenna mounted on it.  

Planning permission for an external antenna shouldn't be necessary (depending on local laws and rules etc) as the TRX antenna is smaller than a television aerial attaching to the side of a building and should not find imperfection with legality issues for use. The antenna receives its power regulated from the MBMBS unit itself. As these units should be covered by EC Declaration of Conformity to the R and TTE Directive 1999/5/EC and meet the criteria in the standards to confirm conformity to e.g. Articles 3.1a, 3.1b and 3.2 and carrying a CE Mark the actual ownership and use of the device should be lawful; depending upon the country where the device is intended for placement and use. 

From the perspective of indoor radio test measurements for cell site analysis, results may be confusing if the test handset identifies readings of poor QoS coverage unlikely to be usable with a standard moble phone, thus could be misleading. Extra time for the site survey should be taken to ensure if any assisted sources are used to improve coverage reception that might be used by a target device.

In conclusion, MBMBS are not Femtocells although there are similarities where it could be easy to mistake the devices to be of the same family. MBMBS come in various guises, I have seen six designs todate from standard features to advanced features for routing calls/data and multiple SIM/USIM ports. These devices are versatile and can be easily moved from place to place; and if network unlocked this can allow various mobile network SIMs/USIMs to be easily swapped over. MBMBS provide access to GSM 2G, GPRS 2.5G, WCDMA (HSPA) 3G coverage and WiFi 802.11 coverage might be routed for transmission over the cellular network, too.

Shake your profile

Shake your profile

Some may have seen the adverts on television where the film director on set shouts "action" and then, suddenly his phone starts to ring. He flips the phone onto its screen-face and the phone stops ringing. Motion sensors since 2009 have becoming one of the features on smart phones and devices, and a new release from Micromax Mobile X395 is another example where motion sensors (once switched ON) are included as a feature of this dual-SIM phone, but in this case allows the user to switch between one of the SIMs installed in this dual-SIM handset.

Media GIF Photo Courtesy of Micromax Mobile X395 (c)

Examiners should be aware that this java (according to its spec) smart phone requires manual examination to determine other user-defined SIM settings and Motion Sensor settings, apart from SIM1/SIM2 profiles -

Menu>SIM Manager:
- Dual SIM Settings- Set the dual settings as per your requirement
- Default SIM Selection- Choose the default SIM slot to be used

Menu > Settings > Motion Sensor Settings:
- An incoming call can be put on silent mode by simply turning it upside down

Some previous discussions at my blog about dual-SIMs or devices that may provide some useful observations about examining dual-SIM devices:

- http://trewmte.blogspot.com/2008/11/cloning-test-sim-cards.html
- http://trewmte.blogspot.com/2008/08/dual-international-mobile-station.html
- http://trewmte.blogspot.com/2007/06/china-mobile-telephones.html
- http://trewmte.blogspot.com/2006/11/super-ghost-sim.html

Research on 'tilt' and 'three axis way' motion sensors:

- http://en.wikipedia.org/wiki/Tilt_sensor
- http://en.wikipedia.org/wiki/Accelerometer

Cell Site Analysis Fundamentals

Cell Site Analysis Fundamentals

COURSE CONTENT

Section 1 Introduction
Section 2 Legal and Technical Frameworks
Section 3 GSM and 3GPP Standards
Section 4 Subscriber Check/Billing/Call Records Check List
Section 5 Example Subscriber Check
Section 6 Example Call Detail/Data Record (CDR)
Section 7 Example Subscriber Billing
Section 8 Example of Call Records
Section 9 Example Mobile Network Details
Section 10 Cross-referencing sources of evidence
Section 11 PLMN - Introduction to GSM/WCDMA Network Elements
Section 12 PLMN - Base Transceiver Station (BTS)
Section 13 PLMN - GSM & WCDMA Base Stations
Section 14 PLMN - GSM & WCDMA Mobile Switching Centre (MSC)
Section 15 PLMN - GSM & WCDMA Databases VLR EIR OMC HLR & AuC
Section 16 PLMN - GSM & WCDMA Support Databases
Section 17 Introduction to Cell Site Identification
Section 18 Introduction to Cell Site Analysis
Section 19 Cell Site Analysis - Tools
Section 20 Cell Site Analysis - Ideas on Site Surveys
Section 21 Cell Site Analysis - Ideas for Radio Testing
Section 22 Cell Site Analysis - Regulation/Industry Requirements that assists CSA
Section 23 Cell Site Analysis - Notable Review Material
Section 24 Sample Cell Site Investigation Check List
Section 25 Support Material - Evidence & Legal issues

DOWNLOAD DETAILS HERE:
http://www.4shared.com/document/7AjcSbww/MTEB_CSAF_Booking_Form.html

Orange and Vodka - mixing mobile networks

Orange and Vodka - mixing mobile networks

(shaken, not stirred)

.

Good title for a book or article that heading. I thought this would be a useful post regarding the unusual occurrence of roaming onto a forbidden UK network from the home UK network.These screenshots record an event that happened on my wireless broadband. In the area I was located at the time Orange provided GPRS at 56K but download rates of under 6.5kbps (no 3G) - so not very good at all.
.

.
Such a matter like this may have an influence, if understood that it may occur, on any post-obtained radio test measurements after an alleged crime, or may even taint what may be considered a flawless opinion or conclusion, that is when conducting cell site analysis (CSA) investigations for evidential purposes.

.

.
It is not the fact that post-obtained radio test measurements failed to replicate an earlier event, it is the fact that a 'possibility' that may need to be explored to provide a more rounded opinion or conclusion in a report and at Court maybe missed or overlooked.
.
There are answers to the above conundrum but this is not the point of this post, which has been to highlight a technical event that might impact on evidence.

Orange and Vodka - mixing mobile networks

Orange and Vodka - mixing mobile networks

(shaken, not stirred)

.

Good title for a book or article that heading. I thought this would be a useful post regarding the unusual occurrence of roaming onto a forbidden UK network from the home UK network.These screenshots record an event that happened on my wireless broadband. In the area I was located at the time Orange provided GPRS at 56K but download rates of under 6.5kbps (no 3G) - so not very good at all.
.

.
Such a matter like this may have an influence, if understood that it may occur, on any post-obtained radio test measurements after an alleged crime, or may even taint what may be considered a flawless opinion or conclusion, that is when conducting cell site analysis (CSA) investigations for evidential purposes.

.

.
It is not the fact that post-obtained radio test measurements failed to replicate an earlier event, it is the fact that a 'possibility' that may need to be explored to provide a more rounded opinion or conclusion in a report and at Court maybe missed or overlooked.
.
There are answers to the above conundrum but this is not the point of this post, which has been to highlight a technical event that might impact on evidence.

A808 Watch Phone With Bluetooth

A808 Watch Phone With Bluetooth

.

The spec for the A808 Tri-band (GSM 900 / 1800 / 1900 MHZ), GPRS and Bluetooth connectivity, a 1.3 inch touch screen and interestly not only keyboard but handwritten input. Additionally it comes with an MP3 / MP4 multimedia player and FM radio. And it's made in China.

.
.

The SIM is underneath the back cover and the cover carries an Apple-logo. Anyone examined this fancy goods style watch mobile telephone before and if so can you please send an email to me (to the email address located at the top my blogspot page) to let me know of any useful programs for downloading data via bluetooth. Thanks.

.

A808 Watch Phone With Bluetooth

A808 Watch Phone With Bluetooth

.

The spec for the A808 Tri-band (GSM 900 / 1800 / 1900 MHZ), GPRS and Bluetooth connectivity, a 1.3 inch touch screen and interestly not only keyboard but handwritten input. Additionally it comes with an MP3 / MP4 multimedia player and FM radio. And it's made in China.

.
.

The SIM is underneath the back cover and the cover carries an Apple-logo. Anyone examined this fancy goods style watch mobile telephone before and if so can you please send an email to me (to the email address located at the top my blogspot page) to let me know of any useful programs for downloading data via bluetooth. Thanks.

.

GSM mobile phone radio technologies power ahead

GSM mobile phone radio technologies power ahead

.

As mobile and mobile telephone communications power ahead with continuing growth, and predictions for growth are commonly reported upto 2015, it is not surprising that, once again, positive *statistics for GSM (family of systems: GSM, GPRS, EDGE, WCDMA-HSPA) confirms the digital wireless future. *Market Research: GSA

.

- 3.54 billion GSM subs; 89.5% global mobile market (Q4 08)

.

- GSM gained 2.7% market share in the year to 31.12.08

.

- 264 3G/WCDMA networks are commercially launched in 115 countries

.

- 278 HSDPA operator commitments in 118 countries

.

- 247 commercial HSDPA networks in 110 countries

.

- Over 93.5% of commercial WCDMA networks have also launched HSPA

.

- Over 69% of commercial HSDPA networks support peak downlink speeds of 3.6 Mbps or higher

.

- Over 34% of commercial HSDPA networks support peak downlink speeds of 7.2 Mbps or higher

.

- 79 operators committed to HSUPA

.

- 66 HSUPA networks launched in 47 countries

.

- At least 13 operators have committed to HSPA+

.

- More than 20 operators have committed to LTE

.

- 7 UMTS900 networks (WCDMA-HSPA) launched

.

- 286.9 million WCDMA subscriptions (Q4 08)

.

- HSPA subscriptions represent 31.5% of WCDMA subscriptions (Q3 08)

.

- 1,276 HSPA devices launched (January 2009)

.

- 192 HSUPA-capable devices launched

.

- 231 HSPA devices support GPS (excl. notebooks)

.

- 799 HSDPA devices support 3.6 Mbps (peak)(excl. notebooks)